This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa
File:                     3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa (raw, json)
Hash identifier:          9LP5Dq4sHfJCiLWlLYlVdcFctTH1DGUZq2ttUyuLovU=
Subject key identifier:   2D:82:AD:FD:9D:84:8C:79:88:FF:E8:C6:F8:96:DF:07:95:15:12:FA
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       0DCE7278F1479004F253AE9738D77CA99772F75C
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa
Signing time:             Tue 06 Jan 2026 19:45:05 +0000
ROA not before:           Tue 06 Jan 2026 19:40:05 +0000
ROA not after:            Tue 05 Jan 2027 19:45:05 +0000
asID:                     11172
IP address blocks:        192.207.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ce:72:78:f1:47:90:04:f2:53:ae:97:38:d7:7c:a9:97:72:f7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:05 2026 GMT
            Not After : Jan  5 19:45:05 2027 GMT
        Subject: CN=2D82ADFD9D848C7988FFE8C6F896DF07951512FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:a7:a0:d2:67:57:a3:cc:d7:f9:a4:2c:66:
                    63:8c:c2:22:a5:52:55:6f:09:9e:1b:96:c7:80:23:
                    2f:a1:09:e5:3b:d9:4d:ef:e0:3f:5d:51:e0:47:2a:
                    58:12:7f:0c:b5:83:9c:85:0f:b1:6a:95:e7:ea:a5:
                    0b:44:df:7f:0e:d6:db:2d:f8:be:f9:c8:37:59:ed:
                    8d:87:df:80:99:0e:87:44:f7:91:7b:5d:70:bf:3e:
                    47:df:c7:13:67:22:b7:b0:6f:2c:ac:5c:20:02:00:
                    63:42:6a:89:2f:bc:10:a6:b7:da:98:2d:9b:59:5b:
                    db:d7:1f:d0:70:0d:b9:8a:a6:29:4c:a4:a3:80:94:
                    18:26:ed:28:68:ec:a0:72:66:29:0e:51:46:46:50:
                    16:3c:67:13:43:20:70:d0:c9:63:25:40:ef:6a:87:
                    e2:c5:b4:15:91:e1:54:a7:5c:44:61:1e:60:7c:20:
                    66:6b:a6:24:d5:a6:ab:64:50:ef:06:ac:d6:38:5d:
                    50:2e:65:a1:c6:9f:74:93:68:d3:a7:dc:f1:32:ea:
                    73:5c:13:d4:4e:42:09:de:ae:8b:79:3f:d5:b8:d1:
                    20:7e:55:6c:bb:2b:bd:16:b5:ff:7b:b9:52:c0:99:
                    d2:15:1b:c3:68:78:04:f9:ff:58:22:82:08:d0:68:
                    c3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:82:AD:FD:9D:84:8C:79:88:FF:E8:C6:F8:96:DF:07:95:15:12:FA
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:eb:f5:9e:41:4f:fc:2f:7a:e7:b9:5e:72:0b:d9:f4:29:dc:
         cc:7d:a5:a7:99:0b:27:12:b5:0c:04:f7:2f:5e:0c:be:99:b4:
         41:18:07:44:e3:16:9f:4d:04:d2:0a:c6:ea:00:35:3a:97:f3:
         e0:3f:30:7f:08:4f:18:9c:3a:6f:38:5a:c4:48:f2:94:aa:03:
         f4:60:4f:79:7e:8b:99:f3:0c:f6:46:a9:1a:52:49:fd:e0:e9:
         65:8f:b4:11:b4:2c:a2:5e:c1:6b:33:ac:41:de:65:25:5b:e2:
         48:ab:27:15:6c:39:0d:e3:5e:e6:e8:bf:4e:67:a0:5c:5e:6b:
         d4:a1:1d:84:e3:89:8c:c0:92:1d:53:d8:1c:11:43:8b:50:52:
         40:ae:f6:c6:24:4e:22:c3:55:1d:58:3c:93:1c:b2:6c:ea:dc:
         7c:41:2f:99:ac:69:5a:c4:d4:d7:ac:10:b2:92:80:b3:a8:0f:
         37:07:05:c7:59:d2:cc:6e:70:0d:11:7b:31:4d:4b:6f:f9:fd:
         6d:2a:0f:83:78:0b:8c:32:2a:1a:69:00:0c:a5:c0:0e:a0:d5:
         f2:b4:02:8a:21:0a:3d:d7:53:18:f0:19:ae:f7:40:95:56:3c:
         09:8d:af:e1:5d:71:a8:17:f4:7c:7d:04:1e:b3:10:03:c9:91:
         9c:4b:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:42 2026 by rpki-client